Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa
File: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (raw, json)
Hash identifier: aSA8jLBDOKXb/wGF0KTIXFeM70Ti1je/b4isJG4ZqbQ=
Subject key identifier: ED:59:5C:CF:4A:06:26:7D:64:2C:7E:80:A2:2F:A1:A5:9A:23:32:11
Certificate issuer: /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial: 4B1EFBAA36D48E24F6835A529F9472FD4720FF65
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa
Signing time: Thu 03 Apr 2025 13:57:17 +0000
ROA not before: Thu 03 Apr 2025 13:52:17 +0000
ROA not after: Thu 02 Apr 2026 13:57:17 +0000
asID: 270690
IP address blocks: 190.120.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 11:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:1e:fb:aa:36:d4:8e:24:f6:83:5a:52:9f:94:72:fd:47:20:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Validity
Not Before: Apr 3 13:52:17 2025 GMT
Not After : Apr 2 13:57:17 2026 GMT
Subject: CN=ED595CCF4A06267D642C7E80A22FA1A59A233211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:b2:bd:e1:2d:b0:35:cf:75:d4:ef:31:6b:
23:50:1b:c2:df:f1:27:2f:7c:47:9c:4f:a0:13:ae:
28:00:42:13:72:25:6f:2d:8b:85:84:ac:70:88:c4:
92:04:d1:8a:54:91:b5:cf:32:b5:27:68:90:f5:ec:
7d:ed:d3:f6:f3:67:32:a0:fb:25:1b:fc:b3:6a:ed:
16:5d:76:49:11:08:93:de:e5:20:35:b6:16:cb:eb:
e8:8b:c1:5b:0b:35:0e:65:5e:7d:c8:7a:2f:2a:df:
a8:93:da:6f:14:64:d5:61:ad:c4:43:43:61:8a:ef:
8f:f8:c5:71:62:d0:1c:17:19:57:3a:0b:0b:0f:a6:
e5:b8:3c:0a:5b:07:ea:04:90:e3:e9:75:b6:e1:30:
87:a0:41:78:8d:e9:06:83:53:e4:d8:d1:dd:1f:0e:
0f:18:40:30:53:a6:70:0a:b2:2f:9d:85:ca:89:45:
6b:7b:7e:1a:e7:cb:54:b7:3f:a7:6f:2e:82:c6:4c:
f9:0f:21:03:e4:47:0d:33:7a:71:77:53:6e:3c:59:
76:28:f6:c5:5a:9a:b2:e8:09:1f:0d:0d:d3:11:5a:
b7:ab:60:fc:98:c3:15:83:5a:53:8f:4b:5a:70:ae:
83:3b:af:5c:90:8a:59:7a:a6:6b:f5:3d:e7:44:f3:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:5C:CF:4A:06:26:7D:64:2C:7E:80:A2:2F:A1:A5:9A:23:32:11
X509v3 Authority Key Identifier:
keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.35.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3c:46:4d:5d:d7:f3:4e:c8:f3:6e:2a:68:3d:34:7d:31:71:
54:47:2d:e1:51:5a:44:87:4b:72:4e:dc:c9:50:1a:4d:61:fd:
4f:9e:78:7e:fe:8d:65:15:e0:01:26:8a:49:c1:b8:68:31:4f:
92:c5:8d:16:ac:eb:f6:cb:2a:8d:93:12:8c:db:2e:f8:3c:ea:
c8:a4:2e:93:14:52:27:0a:c1:df:3b:2a:35:b4:19:a9:d7:68:
d2:4d:d5:76:34:55:1a:dd:4f:eb:25:b8:40:c0:50:82:4d:90:
79:8d:a5:dd:8e:b8:59:65:b4:46:d1:2a:66:56:99:7e:e0:94:
a5:d9:7a:f3:0e:80:c9:dd:8f:73:72:46:9d:5f:eb:a3:22:8f:
e6:a8:6d:1a:ad:33:92:31:9c:8b:98:d3:de:0a:ea:1b:72:12:
64:b9:9d:71:9b:ab:2a:b6:0a:55:8b:31:6a:f0:32:c1:70:2a:
f7:16:e5:60:bd:12:bb:1c:8a:d7:be:bc:39:d3:cb:02:b2:af:
d4:a4:00:af:cf:28:ec:82:4f:9e:9c:3d:6f:81:5f:76:79:e3:
3c:39:9f:f4:cf:55:4d:d8:15:ca:a5:5f:f7:bb:62:69:68:8b:
20:3f:98:13:71:61:78:d1:02:94:e0:95:51:66:3c:be:99:8f:
cd:0b:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:47:34 2025 by rpki-client